Security readout for executives and security teams
Plain-English summary
This CVE is a Linux kernel bug in the irdma RDMA driver. Two code paths can read and update a completion flag without safe annotations, creating a data race. The public bundle does not describe data loss, privilege escalation, remote exploitation, or a crash, so business urgency is mainly tied to patch hygiene for systems using this driver.
Executive priority
Handle through normal kernel maintenance, with higher priority for servers using RDMA/irdma. There is no cited exploitation or severity score, but kernel race fixes should not be ignored on infrastructure that depends on the affected driver.
Technical view
In RDMA/irdma, cqp_request->request_done is read locklessly in irdma_handle_cqp_op/irdma_wait_event and written in irdma_cqp_ce_handler. KCSAN reported a race during CQP completion and device teardown paths. Upstream stable fixes annotate the lockless access with READ_ONCE/WRITE_ONCE to avoid compiler load fusing and document intent.
Likely exposure
Exposure appears limited to Linux systems running affected kernel builds where the irdma RDMA driver is present or loaded. General Linux hosts without this driver or related RDMA hardware are less likely exposed. The bundle’s version data is incomplete, so confirm exact exposure through kernel branch and distribution advisories.
Exploitation context
The source bundle does not report active exploitation, and KEV is false. It also does not provide a practical exploit scenario. Evidence shows a kernel concurrency bug detected by KCSAN, not a demonstrated attack path.
Researcher notes
The fix is narrowly described as READ_ONCE/WRITE_ONCE annotation for a lockless request_done flag. The bundle lacks CVSS, CWE, trigger preconditions, and exploitability analysis. Treat impact and exact affected ranges as unresolved until upstream branch mapping or distribution advisories clarify practical consequences.
Mitigation direction
- Apply vendor or distribution kernel updates containing the referenced stable fixes.
- Prioritize RDMA-capable systems where the irdma driver is installed or loaded.
- Confirm the relevant upstream stable commit is included for each kernel branch.
- If patching is delayed, check vendor guidance for supported mitigations.
- Disable unused RDMA/irdma functionality only when supported by vendor policy.
Validation and detection
- Inventory Linux hosts and record running kernel versions.
- Check whether the irdma module or RDMA stack is present or loaded.
- Map kernel builds to distribution advisories or the listed upstream stable commits.
- Review kernel logs for KCSAN or irdma race warnings where debugging is enabled.
- Track exceptions for RDMA-enabled systems awaiting vendor kernel updates.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2023-54292 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
Vulnerability timeline
Timeline events are normalized from CVE metadata, CNA source timelines, ADP timelines, and KEV metadata when present.
- CVE reservedCVE Program
The CVE ID was reserved by the assigning CNA.
- CVE publishedCVE Program
The CVE record was published.
- CVE updatedCVE Program
The CVE record metadata indicates this as the latest update time.
Source materials
- CVE List V5 sourceCVE List V5
- https://git.kernel.org/stable/c/c5b5dbcbf91f769b8eb25f88e32a1522f920f37aCVE reference, Linux
- https://git.kernel.org/stable/c/5986e96be7d0b82e50a9c6b019ea3f1926fd8764CVE reference, Linux
- https://git.kernel.org/stable/c/b8b90ba636e3861665aef9a3eab5fcf92839a2c5CVE reference, Linux
- https://git.kernel.org/stable/c/f0842bb3d38863777e3454da5653d80b5fde6321CVE reference, Linux
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.